The Development of Personal Data Protection Law in Indonesia: Challenges and Prospects for the Implementation of Law No. 27 of 2022

Main Article Content

Risky Budiman

Abstract

Indonesia’s enactment of Law No. 27 of 2022 on Personal Data Protection (PDP Law) marks a significant milestone in the country’s legal landscape, aligning national regulations with global standards such as the European Union’s General Data Protection Regulation (GDPR). This qualitative research examines the evolution of personal data protection law in Indonesia, the main challenges encountered during the initial phase of implementation, and the prospects for effective enforcement. The study employs a normative legal approach, analyzing statutory provisions, secondary legal materials, and recent case studies. Findings indicate that while the PDP Law provides a comprehensive legal framework and establishes clear rights and obligations for data controllers and subjects, substantial challenges remain, including institutional readiness, public awareness, and enforcement capabilities. The paper concludes by discussing the prospects for robust data protection in Indonesia and offers recommendations for strengthening the implementation of the PDP Law.

Downloads

Article Details

How to Cite
Budiman, R. (2023). The Development of Personal Data Protection Law in Indonesia: Challenges and Prospects for the Implementation of Law No. 27 of 2022. Jurnal Smart Hukum (JSH), 2(1), 24–36. https://doi.org/10.55299/jsh.v2i1.1352
Section
Articles

References

Abubakar, N. S. J., Paradji, N.-S. U., Saggap, S., Anding, N. S., Tano, R. M., Arasani, A. H., Ahadain, D. R., Banda, B., Jayari, R., Alamhalil, A., Alih, S. H., & Tahil, S. K. (2024). Hacking Incidents and their Long-Term Implications for User Privacy and Trust. Cognizance Journal of Multidisciplinary Studies, 4(12), 443–453. https://doi.org/10.47760/cognizance.2024.v04i12.041

Adwani, A. (2025). The Evolution of Digital Payments: Implications for Financial Inclusion and Risk Management. In Multidisciplinary Research Nexus: Ideas for the Modern World. San International Scientific Publications. https://doi.org/10.59646/mrnc6/321

Anggraini, D. I., & Putra, P. O. H. (2025). Data Protection Impact Assessment Framework in the Banking Sector in Indonesia to Implement Law of Personal Data Protection. Jurnal Sistem Informasi, 21(1), 15–34. https://doi.org/10.21609/jsi.v21i1.1439

Ehrenhard, M., Delgado, M. M., Corrales, C., & Guariento, D. (2024). Rural digital transformation: Fostering economic growth by access to services. Open Access Government, 44(1), 446–447. https://doi.org/10.56367/OAG-044-11499

Gani, N. (2024). Legal Politics and Data Protection in Indonesia: A Case Study of the National Data Center Hacking. SASI, 30(3), 296. https://doi.org/10.47268/sasi.v30i3.2213

Hukom, S., Humi, N., & Lukman, I. (2025). The Urgency of Legal Regulation for Personal Data Protection in Indonesia in the Big Data Era. Hakim: Jurnal Ilmu Hukum Dan Sosial, 3(1), 974–992. https://doi.org/10.51903/hakim.v3i1.2291

Judijanto, L., Solapari, N., & Putra, I. (2024). An Analysis of the Gap Between Data Protection Regulations and Privacy Rights Implementation in Indonesia. The Easta Journal Law and Human Rights, 3(01), 20–29. https://doi.org/10.58812/eslhr.v3i01.351

Kusuma, I. G. G. W. (2024). LAW ENFORCEMENT BY THE POLICE AGAINST JUVENILE BRAWLERS RESULTING IN FATALITIES. Airlangga Development Journal, 8(2), 162–172. https://doi.org/10.20473/adj.v8i2.65119

Lihawa, R. (2025). Digital Privacy Crisis: Legal Protection of Social Media Users’ Data in Indonesia’s 2022 Law. Estudiante Law Journal, 7(1), 280–296. https://doi.org/10.33756/eslaj.v7i1.30980

Nafaril, A. N., & Ramadhan, Y. (2024). Factors Affecting Micro Small and Medium Enterprises Taxpayer Compliance at Cilegon Pratama Tax Office. Journal La Sociale, 5(2), 359–371. https://doi.org/10.37899/journal-la-sociale.v5i2.1088

Nasution, N. A. A. (2024). Peran Asosiasi Penyelenggara Jasa Internet Indonesia (APJII) Sumatera Utara dalam Mensosialisasikan Keamanan Berinternet kepada Masyarakat menurut Perspektif Komunikasi Islam. Al-Balagh : Jurnal Komunikasi Islam, 8(1), 24. https://doi.org/10.37064/ab.jki.v8i1.21463

Nuzul Sa’adah, B. L., Sukarmi, S., & Dewantara, R. (2024). Establishing A Personal Data Protection Agency for E-Commerce in Indonesia. Invest Journal of Sharia & Economic Law, 4(2), 292–316. https://doi.org/10.21154/invest.v4i2.10031

Omar, Z., Abdul Hamid, N., & @ Mohd Nor, F. M. (2024). A Systematic Literature Review on Government Non- Financial Assistance towards SMEs Export Performance. International Journal of Research and Innovation in Social Science, VIII(XIX), 143–152. https://doi.org/10.47772/IJRISS.2024.ICAME2411

Perdana, A., & Arifin, S. (2023). Finding a fix for Indonesia’s data protection problems (R. Ernunsari (Ed.)). https://doi.org/10.54377/130f-dbb9

Prayuti, Y. (2024). Implications of Personal Data Protection Law in Consumer Health Data Management to Improve Secure and Confidential Handling in Indonesia. Jurnal Ius Constituendum, 9(3), 461–478. https://doi.org/10.26623/jic.v9i3.9289

Sargiotis, D. (2024). Legal and Regulatory Considerations in Data Governance. In Data Governance (pp. 445–466). Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-67268-2_15

Triyanti, N., Handayani, I. G. A. K. R., & Karjoko, L. (2025). Legal Gaps in Personal Data Protection: Reforming Indonesia’s Population Administration Law. Hasanuddin Law Review, 11(1), 132. https://doi.org/10.20956/halrev.v11i1.6177

Utomo, S. (2024). Personal Data Protection Through Law Number 27 Of 2022: Challenges Of Cybercrime in The Era of Globalization and Digital. Pena Justisia: Media Komunikasi Dan Kajian Hukum, 23(3), 2967–2975. https://doi.org/10.31941/pj.v23i3.5611

Zanuba, S., Saputri, M. M., & Sami’an, S. (2025). Legal Protection of Persons with Mental Disorders in Health Services in Accordance with Laws and Regulations in Indonesia. Jurnal Hukum Indonesia, 4(2), 86–94. https://doi.org/10.58344/jhi.v4i2.1615

Zuwanda, Z. S., Judijanto, L., Khuan, H., & Triyantoro, A. (2024). Normative Study of Law No. 27 of 2022 on the Protection of Personal Data and its Impact on the Fintech Industry in Indonesia. West Science Law and Human Rights, 2(04), 421–428. https://doi.org/10.58812/wslhr.v2i04.1367